Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1xEUBdaXxEIMgs84LU51pH7wPsY.roa
File: 1xEUBdaXxEIMgs84LU51pH7wPsY.roa (raw, json)
Hash identifier: 7r9tuR5vIQ5PD1GMxeoSiqs6OxJtc+63e75l3eDQ1N8=
Subject key identifier: D7:11:14:05:D6:97:C4:42:0C:82:CF:38:2D:4E:75:A4:7E:F0:3E:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A210BDC5F716C6829DA0810C1B66115E5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1xEUBdaXxEIMgs84LU51pH7wPsY.roa
Signing time: Wed 23 Aug 2023 06:19:00 +0000
ROA not before: Wed 23 Aug 2023 06:19:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:0b:dc:5f:71:6c:68:29:da:08:10:c1:b6:61:15:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 06:19:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7111405d697c4420c82cf382d4e75a47ef03ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:1c:ee:15:a3:f7:b8:9c:e8:6d:6d:56:5d:
70:ef:4e:ad:8f:4a:b5:29:cf:d1:9a:9e:5f:22:c0:
5e:c2:c6:56:9f:91:c5:1f:e0:0c:0e:30:21:92:85:
02:85:9e:de:d7:74:36:99:b9:de:01:83:53:f1:f1:
45:3e:b7:e4:9f:79:1b:e1:70:95:bc:91:06:2e:12:
9d:82:07:b3:6b:04:ac:8e:e5:7c:f0:36:e7:5e:ee:
28:f3:dc:5c:87:5a:79:f9:21:9b:ca:ab:94:b7:83:
1d:72:e5:ec:0f:20:c4:06:a9:6d:66:56:da:c7:73:
1a:fe:4b:42:26:63:18:ee:47:50:d6:a0:0e:67:f3:
f6:31:89:61:52:59:57:a5:e8:04:22:52:56:ba:44:
0c:f3:cb:bd:ed:53:bc:b1:ef:7a:aa:88:29:c2:d3:
f9:38:25:91:8c:ec:d9:53:06:33:5f:ad:5d:22:35:
77:e0:de:ac:36:f6:cf:26:86:9c:71:a1:6b:dc:50:
d7:bc:f4:0c:c4:eb:91:4e:8e:32:6e:91:5d:15:62:
3d:33:58:31:a1:47:f9:58:10:78:04:27:66:d5:0d:
b3:d8:23:c7:ab:e2:1f:06:aa:1f:e5:24:14:62:c0:
7e:47:28:8f:bb:fb:94:37:3e:1d:cb:3e:72:a9:7d:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:14:05:D6:97:C4:42:0C:82:CF:38:2D:4E:75:A4:7E:F0:3E:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1xEUBdaXxEIMgs84LU51pH7wPsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:49:de:a2:dc:cb:b7:12:8e:d7:10:44:99:22:de:c7:35:1b:
10:3d:d5:88:e6:88:b0:22:89:3d:6c:78:85:a2:23:13:b0:e1:
b4:08:93:c6:51:fb:4b:ce:a9:74:d9:15:62:11:ad:2c:d7:2f:
47:3e:da:ab:a1:46:da:f0:fd:c5:73:75:02:3d:24:77:9a:17:
73:c5:5b:37:b6:bf:45:93:66:c1:e3:95:f2:22:ff:b2:1d:e7:
2d:fd:2c:9e:2b:97:f2:12:d7:eb:29:e4:77:6b:2c:aa:04:94:
11:dd:ad:11:ee:18:b4:86:77:9d:7b:67:db:00:ce:2e:b4:97:
63:82:d4:db:f9:4a:04:ef:67:48:16:e4:44:bd:42:fb:89:8e:
eb:86:16:53:3d:41:3a:85:9d:6d:4a:ae:a1:42:12:70:b6:60:
a4:76:b7:92:72:00:e7:11:cf:80:8b:b5:80:e3:3f:6e:7b:63:
8e:57:a5:c1:26:67:7a:9b:f0:7c:68:38:87:c0:17:ca:17:bc:
d2:84:bf:8b:ab:fa:42:6e:bc:64:3d:7e:ce:e6:8f:c3:2a:62:
5b:ef:c6:b9:2c:40:cc:5c:4c:ba:ca:64:c3:dc:57:ee:6a:87:
8d:2f:99:cf:c9:20:0c:80:76:53:91:ad:0e:46:e3:4e:ed:88:
2d:f1:a8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:12:56 2025 by rpki-client